Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: uUQ0JlevwPnl1FVfSuIVIP+clhxD1TrySiNzfxgz/rE=
Subject key identifier: A1:E7:94:93:5C:2C:71:52:13:3D:40:84:29:67:6C:96:ED:A7:F1:78
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 01A0F23158BFE6BBBD1F88D66CFC48F80869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 0A17
Signing time: Wed 30 Sep 2026 12:01:55 +0000
Manifest this update: Wed 30 Sep 2026 12:01:55 +0000
Manifest next update: Thu 01 Oct 2026 12:01:55 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: J2pTBkVxwFRHp08RlMq6nXuo86TXc3ySGuWQbwyKuRs=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:58:bf:e6:bb:bd:1f:88:d6:6c:fc:48:f8:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Sep 30 12:01:55 2026 GMT
Not After : Oct 1 12:01:55 2026 GMT
Subject: CN=a1e794935c2c7152133d408429676c96eda7f178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:53:99:20:67:67:65:07:79:95:85:e3:28:
9b:46:8d:ab:d1:2c:4d:10:5a:98:ad:68:69:6c:e3:
3a:2f:33:e6:58:24:52:d2:2b:5b:72:e7:91:69:ef:
fb:cb:ba:84:9f:4c:b9:d8:c7:61:15:9a:68:b5:05:
fb:85:d2:5a:7d:b3:98:5c:83:12:09:39:0b:55:d2:
c5:7d:ce:b8:42:79:03:83:70:4c:97:aa:10:fc:f4:
30:25:75:f9:72:9d:3c:63:88:26:f1:4b:68:0b:e8:
74:3b:9a:b3:4c:9a:c4:7a:97:75:9c:66:e7:91:96:
9e:95:42:fa:1d:a4:04:ad:1d:93:7f:ee:30:cf:4c:
87:38:ea:5a:e7:38:3a:83:7e:ce:25:44:5c:aa:b1:
ef:75:4a:c3:61:ec:74:b4:dc:55:73:b6:08:11:1b:
ff:a7:39:8f:40:6e:a1:8c:d2:20:a0:7e:4d:84:a9:
3d:25:16:41:f8:ce:38:0b:4d:fa:6b:b4:49:68:6b:
00:2b:39:b5:bf:10:ae:53:fd:00:ad:62:8d:82:63:
16:b8:a1:ce:7a:e8:31:8c:58:59:bb:97:0d:5d:e4:
6d:79:b9:09:f8:30:e5:86:eb:13:9c:c3:96:cb:58:
8e:da:b3:e4:5c:3b:b4:28:95:24:b3:99:2a:0e:08:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:94:93:5C:2C:71:52:13:3D:40:84:29:67:6C:96:ED:A7:F1:78
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:ca:f0:7d:df:35:9e:3c:10:f8:77:b9:99:a2:7f:1f:5e:
d2:8f:57:56:8c:39:c1:e6:69:24:03:6a:a8:84:f3:27:43:cf:
30:2a:11:16:3a:11:06:3e:e7:5f:6e:c6:2a:52:3f:e1:bb:ad:
cd:57:e5:c7:eb:8a:1b:77:87:38:ac:b0:a0:53:80:a2:f6:7b:
68:fa:39:f8:7d:c5:b1:72:57:e1:9c:0c:b8:f3:f6:24:b8:62:
6b:ab:bd:a0:3d:fb:d3:d5:9f:12:02:6b:5b:e0:e2:14:54:c3:
a9:91:c7:c8:3f:b9:b6:d1:8c:dc:0f:a5:b0:12:db:85:d6:35:
79:c2:74:ac:8f:1e:be:9f:c1:c0:17:97:e1:e6:db:46:27:2b:
1e:4e:89:f4:a1:78:d3:d1:b5:32:4c:36:01:e3:85:20:96:e4:
f9:2f:96:7a:cf:e6:31:94:93:2b:01:7f:f9:7a:77:93:b8:4f:
44:0a:a9:78:69:77:0d:c4:1d:c4:5b:6d:ae:50:be:b3:b5:22:
12:5d:0f:30:88:33:ac:e1:93:ef:75:77:55:4f:4a:1b:60:c9:
11:6d:ee:aa:21:df:9a:92:39:12:db:80:f5:8a:3e:ac:cc:69:
c1:5b:4c:84:2c:00:11:bc:e0:16:34:18:4e:99:83:84:be:08:
cc:27:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:24:11 2026 by rpki-client